Merge pull request #457 from GalacticHypernova/patch-3

fix: remove navigate-to csp directive
Baroshem · May 28, 2024 · 1346bc3 · 1346bc3
2 parents d40ced0 + b1d3853
commit 1346bc3
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/docs/content/1.documentation/2.headers/1.csp.md b/docs/content/1.documentation/2.headers/1.csp.md
@@ -75,7 +75,6 @@ contentSecurityPolicy: {
   'sandbox'?: CSPSandboxValue[] | false;
   'form-action'?: CSPSourceValue[] | false;
   'frame-ancestors'?: ("'self'" | "'none'" | string)[] | false;
-  'navigate-to'?: ("'self'" | "'none'" | "'unsafe-allow-redirects'" | string)[] | false;
   'report-uri'?: string[] | false;
   'report-to'?: string | false;
   'upgrade-insecure-requests'?: boolean;

diff --git a/src/types/headers.ts b/src/types/headers.ts
@@ -82,7 +82,8 @@ export type ContentSecurityPolicyValue = {
   'sandbox'?: CSPSandboxValue[] | string | false;
   'form-action'?: CSPSourceValue[] | string | false;
   'frame-ancestors'?: ("'self'" | "'none'" | string)[] | string | false;
-  'navigate-to'?: ("'self'" | "'none'" | "'unsafe-allow-redirects'" | string)[] | string | false;
+  // See https://github.com/w3c/webappsec-csp/pull/564
+  //'navigate-to'?: ("'self'" | "'none'" | "'unsafe-allow-redirects'" | string)[] | string | false;
   'report-uri'?: string[] | string | false;
   'report-to'?: string | false;
   'upgrade-insecure-requests'?: boolean;